JP2009104509A - Terminal authentication system and terminal authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a terminal authentication system or the like for reducing the burden on a user at PSK authentication. <P>SOLUTION: In a terminal authentication process in the terminal authentication system 1, a terminal 5 generates an authentication code by using shared-key information that is pre-shared with a particular authentication server 3 requested to authenticate the terminal 5 itself and that is retained by the terminal 5 itself; the terminal 5 then transmits the URL of the particular authentication server 3 requested to authenticate the terminal 5 and the authentication code to an access point 7; the access point 7 in turn generates authentication request information and transmits the generated authentication request information to the authentication server 3 related to the URL received from the terminal 5; based on the authentication request information received from the access point 7, the authentication server 3 identifies the shared-key information that the authentication server 3 itself retains, and verifies the authentication code using the shared-key information identified. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention includes a terminal authentication system including at least a terminal, an access point for connecting the terminal to the network, and an authentication server for authenticating the terminal, and the access point and the authentication server connected to the network, and the terminal The present invention relates to a terminal authentication method used in an authentication system.

  Currently, a mobile portable terminal connected to a network (particularly the Internet or the like) needs to be authenticated by some method when connected to the network for commercial or security reasons. For example, there is a case where a notebook PC (Personal Computer) tries to connect to a wireless LAN (Local Area Network) built in a station or a restaurant. In this case, the notebook PC receives authentication from the wireless LAN access point or an authentication server to which the access point requests authentication.

  At present, sensor networks that connect various devices to a network and provide various new services are attracting attention. Also in the sensor network, when connecting to the network, the device needs to be authenticated by some method, like the notebook PC.

  Hereinafter, the “terminal” includes a mobile portable terminal such as a notebook PC and a device used for a sensor network. Further, “the terminal is connected to the network” means that the terminal is in a state where information can be transmitted / received to / from other apparatuses via the network.

  By the way, as means for authenticating such a terminal, public key infrastructure (PKI: Public Key Infrastructure) authentication (hereinafter referred to as “PKI authentication”) and pre-shared secret key (PSK: Pre-Shared Secret Key) authentication ( Hereinafter, it is referred to as “PSK authentication”).

  PKI authentication is a mechanism in which authentication is performed by a third party who can trust the identity of the user. Using the user's public key listed in a public key certificate (usually created by a third-party certificate authority), users can mutually recognize each other as legitimate, Thereafter, the users can directly encrypt and decrypt the communication text. With this mechanism, it is not necessary for users who communicate with each other to exchange some secret information in advance, but it takes time to prepare such as presenting an official ID and registering with a certificate authority. In addition, public key cryptography used for PKI authentication involves complicated encryption processing at the time of authentication and a large amount of calculation performed by the terminal.

On the other hand, PSK authentication is a mechanism for realizing authentication by sharing secret information such as a password in advance between communicating users. Since PSK authentication is simpler and requires less calculation amount than the PKI authentication, it is widely used for dial-up connection, home wireless LAN, and the like. As a conventional technique that employs a PSK authentication mechanism, for example, there is Patent Document 1 that proposes an authentication method in a wireless LAN.
JP 2007-181078 A

  However, PSK authentication in the prior art including the technology disclosed in Patent Document 1 is a method in which secret information is previously stored for each access point (or authentication server) between the terminal and the access point (or authentication server). Since it is necessary to share, when the access point to be connected is frequently changed, it is necessary to change the setting of the terminal each time. Further, sharing secret information in advance for each access point (or authentication server) itself is a heavy load on the user.

  FIG. 10 is a diagram illustrating an example of PSK authentication in the prior art. In the example illustrated in FIG. 10, it is assumed that the terminal 105 and the first authentication server 103a and the terminal 105 and the second authentication server 103b share secret information in advance. Hereinafter, the necessity of changing the setting of the terminal 105 will be described with reference to FIG.

First, the terminal 105 creates authentication data using secret information shared in advance with the first authentication server 103a. Next, the terminal 105 transmits authentication data to the first access point 107a related to the first wireless LAN 110a. Next, the first access point 107a transmits authentication data to a predetermined first authentication server 103a. Next, the first authentication server 103a verifies the received authentication data based on secret information shared in advance with the terminal 105. If the authentication is successful, the terminal 105 is connected to the network 9.
Next, when the terminal 105 moves, the terminal 105 connects with the second authentication server 103b in advance in order to connect to the network 9 via the second access point 107b related to the second wireless LAN 110b. It is necessary to create authentication data using the shared secret information. Here, it is necessary to change the setting of the terminal 105.

  In order to change the setting of the terminal 105, (1) the user manually sets secret information shared in advance with the second authentication server 103b, and (2) the terminal 105 previously stores the second information. The secret information shared in advance with the authentication server 103b may be held and automatically changed as appropriate. In (1), the load on the user is large. In (2), the change in the setting of the terminal 105 itself has no load on the user. However, since there is a possibility that the second access point 107b is installed by a malicious person, it is necessary to take some measures for the terminal 105 to automatically change the setting appropriately.

  The present invention has been made in view of the above-described problems, and an object thereof is to provide a terminal authentication system and the like that reduce a user's load in PSK authentication. A secondary object of the present invention is to provide a terminal authentication system or the like that can authenticate an access point. A secondary object of the present invention is to provide a terminal authentication system or the like that reduces the processing load on the terminal.

  In order to achieve the above-mentioned object, the first invention comprises at least a terminal, an access point for connecting the terminal to a network, and an authentication server for authenticating the terminal, and the access point and the authentication A terminal authentication system connected to a network, wherein the terminal holds authentication server information including information for uniquely identifying a specific authentication server requesting authentication of the terminal itself on the network; Means for transmitting / receiving arbitrary information to / from the access point, wherein the access point transmits / receives arbitrary information to / from the terminal and the authentication server, and the authentication server information received from the terminal. Authentication request information for requesting authentication of the terminal to the authentication server specified by Comprising the authentication request information generating means, a to said authentication server is a terminal authentication system characterized by comprising, means for transmitting and receiving said access point and any information. By using the terminal authentication system according to the first invention, it is possible to reduce the load on the user in PSK authentication. Further, by adopting PSK authentication, it is possible to reduce the processing load on the terminal.

  In the first invention, the terminal uses shared key information held by the terminal itself, and means for holding shared key information shared in advance with a specific authentication server that requests authentication of the terminal itself. Authentication code generating means for generating an authentication code, wherein the authentication server holds shared key information shared beforehand with a specific terminal, and shared key information held by the authentication server itself. It is desirable to further comprise authentication code verification means for using and verifying the authentication code. Accordingly, the shared key information shared in advance between the terminal and the authentication server is not transmitted over the network and is secure.

  In the first aspect of the invention, the terminal further includes means for generating a random number as a terminal generated random number, and the authentication code generating means included in the terminal further authenticates using the terminal generated random number. It is desirable to generate code. As a result, the same authentication code is not used and it is safe.

  In the first aspect of the invention, the access point further includes means for generating a random number as an access point generated random number, and the authentication code generating means included in the terminal further receives from the access point. It is desirable to generate an authentication code using the access point generation random number. As a result, the quality of random numbers is improved, and so-called replay attacks (for example, in the case of authentication via a network, a third party eavesdrops on the communication content to obtain authentication information, and the same content is stored in the connection destination server. Can be protected against unauthorized access).

  In the first invention, the authentication server is secret information between the authentication server itself and a specific terminal using the shared key information held by the authentication server itself as an authentication server generation secret. Means for generating a secret, and the terminal uses the shared key information held by the terminal itself as a terminal generation secret, and a specific authentication server that requests authentication of the terminal itself and the terminal itself; It is desirable to further comprise means for generating a secret that is secret information between the two. Thereby, after authentication of the terminal, the secret can be used as shared key information in communication between the access point and the terminal.

  In the first aspect of the invention, it is preferable that an authentication code verification means provided in the authentication server further authenticates the access point. Thereby, the authentication of the access point can be performed implicitly from the standpoint of the user of the terminal.

  A second invention comprises at least a terminal, an access point for connecting the terminal to a network, and an authentication server for authenticating the terminal, wherein the access point and the authentication server are connected to the network. A terminal authentication method used in an authentication system, wherein the terminal is shared key information shared in advance with a specific authentication server that requests authentication of the terminal itself, and held by the terminal itself Generating an authentication code using the authentication server information including information for uniquely identifying a specific authentication server on the network for requesting authentication of the terminal itself, and information related to the authentication code Transmitting to the access point, and the access point includes the authentication server information received from the terminal. Generating authentication request information including information related to the authentication code, and requesting authentication of the terminal to the authentication server specified by the access point generated by the access point Transmitting the authentication request information to the authentication server specified by the authentication server information received from the terminal; and the authentication server itself holds the authentication request information based on the authentication request information received from the access point Identifying the shared key information to be verified, and verifying the authentication code using the identified shared key information. By using the terminal authentication method according to the second invention, it is possible to reduce the load on the user in PSK authentication. Further, by adopting PSK authentication, it is possible to reduce the processing load on the terminal. Also, the shared key information shared in advance between the terminal and the authentication server is not transmitted over the network and is safe.

  The second invention further includes a step in which the terminal generates a random number as a terminal-generated random number, and the step of generating an authentication code performed by the terminal further includes an authentication code using the terminal-generated random number. It is desirable to generate. The effect of this is as described above in the description of the first invention.

  In the second invention, the access point generates a random number as an access point generated random number, and the access point transmits information related to the access point generated random number to the terminal. It is further preferable that the step of generating an authentication code performed by the terminal further includes generating an authentication code using the access point generation random number received from the access point. The effect of this is as described above in the description of the first invention.

  Further, in the second invention, the authentication server is secret information between the authentication server itself and a specific terminal using the shared key information held by the authentication server itself as an authentication server generation secret. Generating a secret; the authentication server transmitting the authentication server-generated secret to the access point; and the terminal using the shared key information held by the terminal itself as a terminal-generated secret. Preferably, the method further includes the step of generating a secret that is secret information between the terminal itself and a specific authentication server that requests authentication of the terminal itself. The effect of this is as described above in the description of the first invention.

  In the second aspect of the invention, it is preferable that the step of verifying the authentication code performed by the authentication server further authenticates the access point. The effect of this is as described above in the description of the first invention.

  According to the present invention, it is possible to provide a terminal authentication system or the like that reduces the load on the user in PSK authentication. In addition, a terminal authentication system that can authenticate an access point can be provided. Further, it is possible to provide a terminal authentication system or the like that reduces the processing load on the terminal.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of a terminal authentication system 1 according to an embodiment of the present invention. As shown in FIG. 1, the terminal authentication system 1 includes an authentication server 3, a terminal 5, an access point 7, and the like. FIG. 1 shows that there are a plurality of authentication servers 3 and a plurality of terminals 5 for one access point 7. However, it does not mean that there is only one access point 7, but there are similarly a plurality of authentication servers 3 and a plurality of terminals 5 for access points 7 installed in different places.

  The authentication server 3 and the access point 7 are connected to the network 9 and can communicate with each other via the network 9. On the other hand, the terminal 5 cannot be directly connected to the network 9 but is connected by the access point 7. When the access point 7 connects the terminal 5 to the network 9, the authentication server 3 authenticates the terminal 5 in response to a request from the access point 7. The communication between the terminal 5 and the access point 7 is usually near field communication.

  Next, the hardware configuration of the authentication server 3, the terminal 5, and the access point 7 will be described with reference to FIGS.

FIG. 2 is a hardware configuration diagram of a computer that implements the authentication server 3. Note that the hardware configuration in FIG. 2 is an example, and various configurations can be adopted depending on the application and purpose.
The authentication server 3 includes a control unit 11, a storage unit 13, a media input / output unit 15, a communication control unit 17, an input unit 19, a display unit 21, a peripheral device I / F unit 23, and the like connected via a bus 25. .

  The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like.

The CPU calls and executes a program stored in the storage unit 13, ROM, recording medium, or the like to a work memory area on the RAM, drives and controls each device connected via the bus 25, and is performed by the authentication server 3. The processing described later is realized.
The ROM is a non-volatile memory and permanently holds a computer boot program, a program such as BIOS, data, and the like.
The RAM is a volatile memory, and temporarily stores a program, data, and the like loaded from the storage unit 13, ROM, recording medium, and the like, and includes a work area used by the control unit 11 for performing various processes.

The storage unit 13 is an HDD (hard disk drive), and stores a program executed by the control unit 11, data necessary for program execution, an OS (operating system), and the like. As for the program, a control program corresponding to an OS (operating system) and an application program corresponding to processing described later are stored.
Each of these program codes is read by the control unit 11 as necessary, transferred to the RAM, read by the CPU, and executed as various means.

  The media input / output unit 15 (drive device) performs data input / output, for example, a CD drive (-ROM, -R, -RW, etc.), DVD drive (-ROM, -R, -RW, etc.), MO drive, etc. And other media input / output devices.

  The communication control unit 17 includes a communication control device, a communication port, and the like, is a communication interface that mediates communication between the computer and the network 9, and controls communication with other devices via the network 9.

The input unit 19 inputs data and includes, for example, a keyboard, a pointing device such as a mouse, and an input device such as a numeric keypad.
An operation instruction, an operation instruction, data input, and the like can be performed on the computer via the input unit 19.

  The display unit 21 includes a display device such as a CRT monitor and a liquid crystal panel, and a logic circuit (video adapter or the like) for realizing a video function of a computer in cooperation with the display device.

  The peripheral device I / F (interface) unit 23 is a port for connecting a peripheral device to the computer, and the computer transmits and receives data to and from the peripheral device via the peripheral device I / F unit 23. The peripheral device I / F unit 23 is configured by USB, IEEE 1394, RS-232C, or the like, and usually includes a plurality of peripheral devices I / F. The connection form with the peripheral device may be wired or wireless.

  The bus 25 is a path that mediates transmission / reception of control signals, data signals, and the like between the devices.

FIG. 3 is a hardware configuration diagram of the terminal 5. Note that the hardware configuration in FIG. 3 shows a configuration that is essential in the embodiment of the present invention. In practice, various configurations can be adopted depending on the application and purpose.
The terminal 5 is connected to a control unit 31, a storage unit 33, a communication control unit 35, and the like via a bus 37.

  The control unit 31 includes a CPU, a ROM, a RAM, and the like. The CPU calls a program stored in the storage unit 33, ROM, or the like to the work memory area on the RAM, executes it, drives and controls each device connected via the bus 37, and performs processing to be described later performed by the terminal 5. Realize. The ROM is a nonvolatile memory and permanently holds various programs, data, and the like. The RAM is a volatile memory, and temporarily stores a program, data, and the like loaded from the storage unit 33, the ROM, and the like, and includes a work area used by the control unit 31 for performing various processes.

  The storage unit 33 is an HDD (hard disk drive) or the like, and stores a program executed by the control unit 31, data necessary for program execution, and the like. As for the program, an application program or the like corresponding to the processing described later is stored. Each of these program codes is read by the control unit 31 as necessary, transferred to the RAM, read by the CPU, and executed as various means.

  The communication control unit 35 usually has an antenna or the like, is a wireless communication interface that performs short-range wireless communication with the access point 7, and controls communication with the access point 7.

  When the terminal 5 is a notebook PC, in addition to the above-described configuration, the terminal 5 includes an input unit for inputting data, a display unit having a display device, and the like. When the terminal 5 is a device in a sensor network, it includes a sensor unit that senses temperature, humidity, acceleration, infrared rays, and the like. However, these are not essential components in the terminal authentication system 1 in the embodiment of the present invention.

FIG. 4 is a hardware configuration diagram of the access point 7. Note that the hardware configuration in FIG. 4 shows a configuration that is essential in the embodiment of the present invention. In practice, various configurations can be adopted depending on the application and purpose.
The access point 7 is connected to a control unit 41, a storage unit 43, a first communication control unit 45, a second communication control unit 47, etc. via a bus 49.

  The control unit 41 includes a CPU, a ROM, a RAM, and the like. The CPU calls a program stored in the storage unit 43, ROM or the like to a work memory area on the RAM, executes it, drives and controls each device connected via the bus 49, and the processing described later performed by the access point 7 Is realized. The ROM is a nonvolatile memory and permanently holds various programs, data, and the like. The RAM is a volatile memory, and temporarily stores a program, data, and the like loaded from the storage unit 43, the ROM, and the like, and includes a work area used by the control unit 41 to perform various processes.

  The storage unit 43 is an HDD (hard disk drive) or the like, and stores a program executed by the control unit 41, data necessary for program execution, and the like. As for the program, an application program or the like corresponding to the processing described later is stored. Each of these program codes is read by the control unit 41 as necessary, transferred to the RAM, read by the CPU, and executed as various means.

  The first communication control unit 45 has a communication control device, a communication port, and the like, and is a communication interface that mediates communication between the access point 7 and the network 9, and communicates with other devices via the network 9. Perform communication control.

  The second communication control unit 47 usually has an antenna and the like, is a wireless communication interface that performs short-range wireless communication with the terminal 5, and performs communication control with the terminal 5.

  Next, a configuration for realizing the functions of the authentication server 3, the terminal 5, and the access point 7 will be described with reference to FIGS.

  FIG. 5 is a block diagram showing an outline of functions of the authentication server 3. As shown in FIG. 5, the authentication server 3 includes a control unit 51, a shared key information holding unit 53, an information transmission / reception unit 55, an authentication code verification unit 57, a secret generation unit 59, and the like.

  The control unit 51 appropriately calls the information transmission / reception unit 55, the authentication code verification unit 57, the secret generation unit 59, and the like, and controls the operation of the authentication server 3 in the terminal authentication process.

  The shared key information holding unit 53 holds shared key information shared beforehand with a specific terminal 5. Here, the sharing of the shared key information is to acquire the same shared key information from each other while ensuring the confidentiality to a third party at the time of registration with the authentication server 3 performed by the user of the terminal 5 or the like. It is. The shared key information itself has no meaning, and it is important that the shared key information is shared while ensuring confidentiality to third parties. The authentication server 3 shares the shared key information with a plurality of terminals 5 in advance, and the contents of each shared key information are different. Therefore, the shared key information holding unit 53 holds a plurality of shared key information for each terminal 5. Specifically, the shared key information holding unit 53 assigns a terminal ID, which is a number for uniquely identifying the terminal 5, for example, at the time of registration work for the authentication server 3 performed by a user of the terminal 5. The shared key information is stored using as a key.

  The information transmission / reception means 55 transmits / receives arbitrary information to / from the access point 7. Here, it is desirable that the information transmission / reception unit 55 performs secure communication using SSL (Secure Sockets Layer), TLS (Transport Layer Security), or the like. Note that the protocol used for secure communication is not limited to SSL or TLS. Another existing protocol may be used, or a protocol defined in the future may be used.

  The authentication code verification means 57 verifies the authentication code using the shared key information held by the authentication server 3 itself. The authentication code is generated by the terminal 5 to be authenticated. Further, it is desirable that the authentication code verification means 57 further authenticates the access point 7.

  The secret generation means 59 generates a secret that is secret information between the authentication server 3 itself and the specific terminal 5 using the shared key information held by the authentication server 3 itself as the authentication server generation secret. The generated secret can be used in communication between the access point 7 and the terminal 5, for example, after the authentication of the terminal 5 is successful.

  FIG. 6 is a block diagram showing an outline of functions of the terminal 5. As shown in FIG. 6, the terminal 5 includes a control unit 61, a shared key information holding unit 63, an authentication server information holding unit 65, an information transmission / reception unit 67, a random number generation unit 69, an authentication code generation unit 71, a secret generation unit 73, and the like. It comprises.

  The control unit 61 appropriately calls the information transmission / reception unit 67, the random number generation unit 69, the authentication code generation unit 71, the secret generation unit 73, and the like, and controls the operation of the terminal 5 in the terminal authentication process.

  The shared key information holding unit 63 holds shared key information shared beforehand with a specific authentication server 3. The shared key information holding unit 63 also holds the terminal ID of the terminal 5 itself.

  The authentication server information holding unit 65 holds authentication server information including information for uniquely identifying a specific authentication server 3 that requests authentication of the terminal 5 itself on the network 9. The information for uniquely identifying the specific authentication server 3 on the network 9 is, for example, a URL (Uniform Resource Locator). Further, the authentication server information may include authentication algorithm specific information for the authentication server 3 to authenticate the terminal 5, authentication request presence / absence information related to the access point 7, and the like. Here, the authentication request related to the access point 7 is that the terminal 5 requests the authentication server 3 to authenticate the access point 7.

  The information transmitting / receiving unit 67 transmits / receives arbitrary information to / from the access point 7. The information transmitting / receiving unit 67 normally transmits / receives information by short-range wireless communication. There are various methods for short-range wireless communication even when limited to a wireless LAN, and IEEE 802.11 is widely used. However, the terminal authentication system 1 according to the embodiment of the present invention is not limited to this.

  The random number generation means 69 generates a random number as a terminal generated random number. The terminal generated random number is used for the authentication code generating means 71.

  The authentication code generation means 71 generates an authentication code using the shared key information held by the terminal 5 itself. Further, it is desirable that the authentication code generation means 71 further generates an authentication code using a terminal-generated random number. As a result, the same authentication code is not used and it is safe. Further, it is desirable that the authentication code generation means 71 further generates an authentication code using an access point generation random number that is a random number generated by the access point 7. This improves the quality of random numbers and protects against so-called replay attacks.

  The secret generation unit 73 generates a secret that is secret information between the terminal 5 itself and the specific authentication server 3 using the shared key information held by the terminal 5 itself as the terminal generation secret. The generated secret can be used, for example, in communication between the access point 7 and the terminal 5 after successful authentication.

  FIG. 7 is a block diagram showing an outline of functions of the access point 7. As shown in FIG. 7, the access point 7 includes a control unit 81, an information transmission / reception unit 83, a random number generation unit 85, an authentication request information generation unit 87, and the like.

  The control unit 81 appropriately calls the information transmission / reception unit 83, the random number generation unit 85, the authentication request information generation unit 87, and the like, and controls the operation of the access point 7 in the terminal authentication process.

  The information transmitting / receiving unit 83 transmits / receives arbitrary information to / from the terminal 5 and the authentication server 3. The information transmission / reception means 83 transmits / receives arbitrary information to / from the authentication server 3 via the first communication control unit 45. The information transmission / reception means 83 transmits / receives arbitrary information to / from the terminal 5 via the second communication control unit 47.

  When transmitting / receiving information to / from the authentication server 3, it is desirable that the information transmitting / receiving unit 83 performs secure communication using SSL, TLS, or the like. Note that the protocol used for secure communication is not limited to SSL or TLS. Another existing protocol may be used, or a protocol defined in the future may be used.

  When transmitting / receiving information to / from the terminal 5, the information transmitting / receiving unit 83 normally transmits / receives information by short-range wireless communication. There are various methods for short-range wireless communication even when limited to a wireless LAN, and IEEE 802.11 is widely used. However, the terminal authentication system 1 according to the embodiment of the present invention is not limited to this.

  The random number generation means 85 generates a random number as an access point generation random number. The access point generation random number is used for the authentication code generation means 71 provided in the terminal 5.

  The authentication request information generating unit 87 generates authentication request information for requesting the authentication server 3 specified by the authentication server information received from the terminal 5 to authenticate the terminal 5.

  Next, the details of the terminal authentication process in the terminal authentication system 1 will be described with reference to FIG.

  FIG. 8 is a sequence diagram showing details of the terminal authentication process. As shown in FIG. 8, in the terminal authentication process, the authentication server 3, the access point 7, and the terminal 5 perform their own processes (indicated by boxes) while exchanging messages (indicated by arrows) with each other. . Note that specific data used in the processing is indicated by symbols in parentheses.

As a premise of the terminal authentication process shown in FIG. 8, the terminal 5 uses the shared key information holding unit 63 to share the shared key information and the terminal ID that have been previously shared with the specific authentication server 3 that requests authentication of the terminal 5 itself. Hold. The shared key information is specifically an authentication key (K _auth ) used by the authentication code generation unit 71 and a key derivation key (K _kdf ) used by the secret generation unit 73. Further, the authentication server 3 holds shared key information shared in advance with the terminal 5 using the terminal ID (ID) as a key. The shared key information is specifically an authentication key (K _auth ) used by the authentication code verification unit 57 and a key derivation key (K _kdf ) used by the secret generation unit 59.

  Further, as a premise of the terminal authentication process shown in FIG. 8, the terminal 5 includes information for uniquely identifying the specific authentication server 3 that requests authentication of the terminal 5 itself on the network 9 by the authentication server information holding unit 65. Holds authentication server information. The authentication server information is specifically a URL (ServerURL) related to the authentication server 3. The URL related to the authentication server 3 (ServerURL) may include identification information of an authentication algorithm for the authentication server 3 to authenticate the terminal 5, presence / absence information of an authentication request for the access point 7, and the like.

  As shown in FIG. 8, the control means 81 of the access point 7 that has received the connection request from the terminal 5 generates a random number (Ra) by the random number generation means 85 (S101). The random number (Ra) is an access point generated random number and is distinguished from a terminal generated random number described later. The random number (Ra) is used for generating an authentication code described later.

  Next, the control means 81 of the access point 7 transmits a random number (Ra) to the terminal 5 by the information transmitting / receiving means 83 (S102).

  Next, the control means 61 of the terminal 5 generates a random number (Re) by the random number generation means 69 (S103). The random number (Re) is a terminal-generated random number and is distinguished from the aforementioned access point-generated random number. The random number (Re) is used for generating an authentication code described later.

ここで、ＭＡＣ（・）とは、メッセージ認証コード（Ｍｅｓｓａｇｅ Ａｕｔｈｅｎｔｉｃａｔｉｏｎ Ｃｏｄｅ）を生成する関数であり、データの改ざん検出、通信相手の認証の２つの機能が盛り込まれている。本発明の実施の形態では、乱数（Ｒａ）、乱数（Ｒｅ）、認証サーバ３に係るＵＲＬ（ＳｅｒｖｅｒＵＲＬ）の結合（Ｒ）をメッセージ、認証鍵（Ｋ_ａｕｔｈ）を秘密鍵として、所定のアルゴリズム（鍵付きハッシュ関数に基づくＨＭＡＣ、ブロック暗号に基づくＯＭＡＣなど）によって、メッセージ認証コードを生成する。アルゴリズムの選択は、認証サーバ３に係るＵＲＬ（ＳｅｒｖｅｒＵＲＬ）に含まれる認証アルゴリズムの特定情報によって行っても良い。
このとき、必ずしも、乱数（Ｒａ）および乱数（Ｒｅ）の両方を必須とするものではない。但し、乱数（Ｒａ）および乱数（Ｒｅ）の両方を用いれば、乱数の質が上がるとともに、いわゆるリプレイ攻撃などを防御することができる。 Next, the control means 61 of the terminal 5 generates an authentication code (AC) by the authentication code generation means 71 (S104). Specifically, the authentication key (K _auth ) is used to authenticate the random number (Ra), the random number (Re), and the combination (R) of the URL (ServerURL) related to the authentication server 3 as shown in the following equation. A code (AC) is generated.

Here, MAC (•) is a function for generating a message authentication code, and includes two functions of data falsification detection and communication partner authentication. In the embodiment of the present invention, a random algorithm (Ra), a random number (Re), a combination (R) of a URL (ServerURL) related to the authentication server 3 is a message, and an authentication key (K _auth ) is a secret key. A message authentication code is generated by HMAC based on a keyed hash function, OMAC based on block cipher, or the like. The algorithm may be selected based on authentication algorithm identification information included in a URL (ServerURL) related to the authentication server 3.
At this time, both the random number (Ra) and the random number (Re) are not necessarily required. However, if both random numbers (Ra) and random numbers (Re) are used, the quality of the random numbers can be improved and so-called replay attacks can be prevented.

  Next, the control means 61 of the terminal 5 transmits the random number (Re), the authentication code (AC), the terminal ID (ID), and the URL (ServerURL) related to the authentication server 3 to the access point 7 by the information transmitting / receiving means 67. (S105).

  Next, the control means 81 of the access point 7 generates authentication request information by the authentication request information generation means 87 (S106). Specifically, the access point 7 determines the transmission destination of the authentication request information based on the received URL (ServerURL) related to the authentication server 3. Next, the access point 7 generates the random number (Ra), the random number (Re), the authentication server 3 based on the random number (Ra) generated by itself, the received random number (Re), and the URL (ServerURL) related to the authentication server 3. A link (R) of the URL (ServerURL) related to is generated. Then, the access point 7 receives the random number (Ra), the random number (Re), the combination (R) of the URL (ServerURL) related to the authentication server 3, and the received authentication code (AC) and terminal ID (ID) as an authentication request. Information.

  Next, the control means 81 of the access point 7 transmits the authentication request information to the authentication server 3 by the information transmitting / receiving means 83 (S107). The authentication request information is generated in S106. Note that it is desirable to use SSL, TLS, or the like for communication between the access point 7 and the authentication server 3.

Next, the control means 51 of the authentication server 3 authenticates the access point 7 by the authentication code verification means 57 as required (S108). Here, “as necessary” means, for example, when the access point 7 communicates with the authentication server 3 for the first time, or when there is an authentication request from the terminal 5 to the access point 7. Authentication of the access point 7 is performed by a client authentication unit based on a protocol such as SSL or TLS, for example. Here, client authentication based on a protocol such as SSL or TLS uses public key infrastructure authentication, and the amount of calculation is large. However, it is assumed that the processing capacity of the authentication server 3 and the access point 7 is higher than the processing capacity of the terminal 5, and the entire processing is not greatly delayed.
If the authentication of the access point 7 fails, the subsequent processing is not performed and the connection request from the terminal 5 also fails. That is, the control means 51 of the authentication server 3 transmits a message indicating that the authentication of the terminal 5 has failed to the access point 7 by the information transmitting / receiving means 55. Then, the control means 81 of the access point 7 transmits a message indicating that the authentication of the terminal 5 has failed to the terminal 5 by the information transmitting / receiving means 83.

  Next, the control means 51 of the authentication server 3 identifies the shared key information by the authentication code verification means 57 (S109). The identification of the shared key information is based on the authentication request information received from the access point 7, and the shared key information shared beforehand with the terminal 5 to be authenticated from the shared key information held by the authentication server 3 itself. Is to search. Here, since the shared key information holding unit 53 of the authentication server 3 holds the shared key information using the terminal ID as a key, the terminal ID (ID) included in the received authentication request information becomes the search key.

Next, the control means 51 of the authentication server 3 verifies the authentication code (AC) by the authentication code verification means 57 (S110). Specifically, the authentication code (AC) is calculated by the same procedure as the authentication code (AC) generation process in S104, and the calculated authentication code (AC) and the authentication code (AC) included in the received authentication request information ( (AC) is equal. When both are equal, the control means 51 of the authentication server 3 determines that the connection request is from the authentic terminal 5. At this point, the authentication of the terminal 5 is successful.
If they are not equal, the subsequent processing is not performed and the connection request from the terminal 5 also fails. That is, the control means 51 of the authentication server 3 transmits a message indicating that the authentication of the terminal 5 has failed to the access point 7 by the information transmitting / receiving means 55. Then, the control means 81 of the access point 7 transmits a message indicating that the authentication of the terminal 5 has failed to the terminal 5 by the information transmitting / receiving means 83.

ここで、ＫＤＦ（・）とは、鍵導出関数（Ｋｅｙ Ｄｒｉｖａｔｉｏｎ Ｆｕｎｃｔｉｏｎ）である。本発明の実施の形態では、例えば、ＰＫＣＳ（Ｐｕｂｌｉｃ Ｋｅｙ Ｃｒｙｐｔｏｇｒａｐｈｙ Ｓｔａｎｄａｒｄｓ）＃５（パスワードベースの暗号標準であり、パスワードから生成した共通鍵によって暗号化する方法である。尚、ＲＦＣ２８９８に採用されている。）の鍵導出関数などを用いる。但し、ＰＫＣＳ＃５に限定するものではない。 Next, the control means 51 of the authentication server 3 uses the shared key information held by the authentication server 3 itself as an authentication server generation secret by the secret generation means 59, between the authentication server 3 itself and the specific terminal 5. The secret (Secret) which is the secret information is generated (S111). Specifically, a random number (Ra), a random number (Re), for binding URL of the authentication server 3 (ServerURL) (R), using a key derivation key _{(K kdf),} as shown in the following equation, A secret (Secret) is generated.

Here, KDF (•) is a key derivation function. In the embodiment of the present invention, for example, PKCS (Public Key Cryptography Standards) # 5 (a password-based encryption standard, which is a method of encrypting with a common key generated from a password, which is adopted in RFC2898. .) Key derivation function. However, it is not limited to PKCS # 5.

  Next, the control means 51 of the authentication server 3 transmits the secret (Secret), which is the authentication server generation secret, to the access point 7 by the information transmitting / receiving means 55 (S112).

  Next, the control means 81 of the access point 7 transmits a message indicating that the authentication of the terminal 5 is successful to the terminal 5 by the information transmitting / receiving means 83 (S113).

Next, the control means 61 of the terminal 5 uses the secret generation means 73 as a terminal generation secret to use the shared key information held by the terminal 5 itself to perform specific authentication requesting authentication of the terminal 5 itself and the terminal 5 itself. A secret that is secret information with the server 3 is generated (S114). Specifically, the secret (Secret) is calculated by the same procedure as the secret generation process in S111.
At this time, each of the access point 7 and the terminal 5 holds a secret (Secret). Accordingly, in the communication between the access point 7 and the terminal 5 thereafter, the secret (Secret) can be used as shared key information.

  In the terminal authentication process shown in FIG. 8, the shared key information shared in advance between the terminal 5 and the authentication server 3 is not transmitted over the network 9 and is safe. In addition, since the terminal 5 does not perform processing with a large amount of calculation, even if the processing capability of the terminal 5 is low, the entire processing is not affected. In particular, when the terminal 5 is a device used in a sensor network in which resources, allowable power consumption, the number of communication between devices, and the like are limited, it is effective to employ the terminal authentication process shown in FIG. .

Next, an example according to the embodiment of the present invention will be described with reference to FIG.
FIG. 9 is a diagram showing an example of PSK authentication in the embodiment of the present invention. In the example shown in FIG. 9, it is assumed that the terminal 5 and the authentication server 3 share the shared key information in advance.

First, the terminal 5 creates authentication data using the shared key information shared in advance with the authentication server 3. Next, the terminal 5 transmits authentication data to the first access point 7a related to the first wireless LAN 10a. Next, the first access point 7a transmits authentication data to the authentication server 3 designated by the received authentication data. Next, the authentication server 3 verifies the received authentication data. If the authentication is successful, the terminal 5 is connected to the network 9.
Next, even if the terminal 5 moves, the terminal 5 may create authentication data using the shared key information shared in advance with the authentication server 3. Then, authentication is performed from the authentication server 3 through the second access point 7b related to the second wireless LAN 10b by the same procedure as described above. If the authentication is successful, the terminal 5 is connected to the network 9. Thus, in the embodiment of the present invention, it is not necessary to change the setting of the terminal 5. Therefore, even if the terminal 5 moves frequently, the user is not burdened.

  When the authentication data received by the authentication server 3 is verified, if the access point 7a (7b) is authenticated, a connection request is transmitted to the access point 7a (7b) installed by a malicious person Even so, it is possible to prevent the user of the terminal 5 from suffering damage such as eavesdropping. In addition, according to the embodiment of the present invention, when the access point 7a (7b) is authenticated, the user of the terminal 5 does not need to perform any setting work, so that the user is not burdened.

  As described above, the terminal authentication system 1 according to the embodiment of the present invention can reduce the load on the user in PSK authentication. Further, the authentication of the access point 7 can be performed implicitly. In addition, the processing load on the terminal 5 can be reduced.

  The preferred embodiments of the terminal authentication system and the like according to the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to such examples. It will be apparent to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea disclosed in the present application, and these naturally belong to the technical scope of the present invention. Understood.

The figure which shows schematic structure of the terminal authentication system 1 Hardware configuration diagram of a computer for realizing the authentication server 3 Hardware configuration diagram of terminal 5 Hardware diagram of access point 7 Block diagram showing an overview of the functions of the authentication server 3 The block diagram which shows the outline | summary of the function of the terminal 5 Block diagram showing an outline of the functions of the access point 7 Sequence diagram showing details of terminal authentication processing The figure which shows an example of the PSK authentication in embodiment of this invention The figure which shows an example of the PSK authentication in a prior art

Explanation of symbols

1 ... Terminal authentication system 3 ... Authentication server 5 ... Terminal 7 ... Access point 7a ... First access point 7b ... Second access point 9 ... Network 10a ... ... First wireless LAN
10b ......... Second wireless LAN
11 ......... Control unit 13 ......... Storage unit 15 ......... Media input / output unit 17 ......... Communication control unit 19 ......... Input unit 21 ......... Display unit 23 ......... Peripheral device I / F unit 25 ......... Bus 31 ......... Control part 33 ......... Storage part 35 ......... Communication control part 37 ......... Bus 41 ......... Control part 43 ......... Storage part 45 ......... First communication control part 47 ......... Second communication control unit 49 ......... Bus 51 ......... Control means 53 ......... Shared key information holding means 55 ......... Information transmission / reception means 57 ......... Authentication code verification means 59 ......... Secret Generation means 61... Control means 63... Shared key information holding means 65... Authentication server information holding means 67 ... Information transmission and reception means 69 ... Random number generation means 71 ... Authentication code generation means 73 ... ... Secret generation means 81 ... ... Control means 83 ...... Information transmission / reception means 85 ......... Random number generation means 87 ......... Authentication request information generation means 103a ......... First authentication server 103b ......... Second authentication server 105 ......... Terminal 107a ......... First Access point 107b ......... second access point 110a ......... first wireless LAN
110b ......... Second wireless LAN

Claims (11)

A terminal authentication system comprising at least a terminal, an access point for connecting the terminal to a network, and an authentication server for authenticating the terminal, wherein the access point and the authentication server are connected to the network;
The terminal
Means for holding authentication server information including information for uniquely identifying a specific authentication server that requests authentication of the terminal itself on the network;
Means for transmitting and receiving arbitrary information to and from the access point;
Comprising
The access point is
Means for transmitting and receiving arbitrary information to and from each of the terminal and the authentication server;
Authentication request information generating means for generating authentication request information for requesting authentication of the terminal to the authentication server specified by the authentication server information received from the terminal;
Comprising
The authentication server is
Means for transmitting and receiving arbitrary information to and from the access point;
A terminal authentication system comprising: Means for holding the shared key information shared in advance by the terminal with a specific authentication server requesting authentication of the terminal itself, and an authentication code for generating an authentication code using the shared key information held by the terminal itself Generating means,
The authentication server further includes means for holding shared key information shared in advance with a specific terminal, and authentication code verification means for verifying the authentication code using the shared key information held by the authentication server itself. The terminal authentication system according to claim 1, further comprising: The terminal further comprises means for generating a random number as a terminal-generated random number;
The terminal authentication system according to claim 2, wherein the authentication code generating means included in the terminal further generates an authentication code using the terminal-generated random number. The access point further comprises means for generating a random number as an access point generated random number,
4. The terminal authentication system according to claim 3, wherein the authentication code generating means included in the terminal further generates an authentication code using the access point generated random number received from the access point. The authentication server further includes means for generating a secret that is secret information between the authentication server itself and a specific terminal using the shared key information held by the authentication server itself as an authentication server generation secret. And
The terminal uses the shared key information held by the terminal itself as a terminal generation secret to generate a secret that is secret information between the terminal itself and a specific authentication server that requests authentication of the terminal itself. The terminal authentication system according to claim 2, further comprising: means.   6. The terminal authentication system according to claim 2, wherein the authentication code verification means provided in the authentication server further performs authentication of the access point. A terminal, an access point for connecting the terminal to the network, and an authentication server for authenticating the terminal are used in a terminal authentication system in which the access point and the authentication server are connected to the network. A terminal authentication method,
A step of generating an authentication code using a shared key information that is shared in advance with a specific authentication server that requests authentication of the terminal itself, the terminal itself holding;
The terminal transmitting authentication server information including information for uniquely identifying a specific authentication server requesting authentication of the terminal itself on a network, and information related to the authentication code to the access point;
The access point is for requesting authentication of the terminal to an authentication server specified by the authentication server information received from the terminal, and authentication request information including information related to the authentication code. Generating step;
The access point transmitting the generated authentication request information to the authentication server specified by the authentication server information received from the terminal;
The authentication server identifies the shared key information held by the authentication server itself based on the authentication request information received from the access point, and verifies the authentication code using the identified shared key information When,
The terminal authentication method characterized by including. The terminal generates a random number as a terminal-generated random number;
Further including
8. The terminal authentication method according to claim 7, wherein the step of generating an authentication code performed by the terminal further generates an authentication code using the terminal-generated random number. The access point generates a random number as an access point generation random number;
The access point transmitting information related to the access point generated random number to the terminal;
Further including
9. The terminal authentication method according to claim 8, wherein the step of generating an authentication code performed by the terminal further generates an authentication code using the access point generation random number received from the access point. The authentication server generates a secret, which is secret information between the authentication server itself and a specific terminal, using the shared key information held by the authentication server itself as an authentication server generation secret;
The authentication server sending the authentication server generated secret to the access point;
The terminal uses the shared key information held by the terminal itself as a terminal generation secret to generate a secret that is secret information between the terminal itself and a specific authentication server that requests authentication of the terminal itself. Steps,
The terminal authentication method according to claim 7, further comprising:   11. The terminal authentication method according to claim 7, wherein the step of verifying an authentication code performed by the authentication server further performs authentication of the access point.

Images